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CLAIMS : 

What is claimed is: 

1. A method for managing access control lists in a 
filesystem, the method comprising: 

associating two or more access control lists with a 
given filesystem object; 

responsive to receiving, from a requestor, a request 
for an access control list associated with the given 
filesystem object, determining a filesystem type of the 
requestor; and 

returning an access control list matching the 
filesystem type of the requestor. 

2. The method of claim 1, further comprising: 
determining whether an access control list matching 

the filesystem type of the requestor exists; and 

responsive to a determination that a matching access 
control list exists, returning the matching access 
control list. 

3. The method of claim 2, wherein the step of returning 
the matching access control list includes accessing the 
matching access control list using an access mechanism 
associated with the filesystem type of the requestor. 

4. The method of claim 2, further comprising: 
responsive to a determination that a matching access 

control list does not exist, providing a new access 



25 

Docket No. AUS920030712US1 



control list for the filesystem type of the requestor; 
and 

returning the new access control list. 

5. The method of claim 4, wherein the step of returning 
the new access control list includes accessing the new 
access control list using an access mechanism associated 
with the filesystem type of the requestor. 

6. The method of claim 4, wherein the step of providing 
a new access control list for the filesystem type of the 
requestor includes translating an existing access control 
list to the filesystem type of the requestor. 

7. The method of claim 4, wherein the step of providing 
a new access control list for the filesystem type of the 
requestor includes providing a default access control 
list for the filesystem type of the requestor based on 
rules associated with the filesystem. 

8. The method of claim 1, wherein the step of 
associating two or more access control lists with a given 
filesystem object includes storing the two or more access 
control lists in file storage with the given filesystem 
object. 

9. The method of claim 1, wherein the step of 
associating two or more access control lists with a given 
filesystem object includes storing a native access 
control list in file storage with the given filesystem 
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object and storing one or more non-native access control 
lists in access control list storage separate from the 
file storage. 

10. The method of claim 9, wherein an access control 
list storage is provided an for each directory, each 
filesystem, or for each portion of a file system. 

11. An apparatus for managing access control lists in a 
filesystem, the apparatus comprising: 

a filesystem, wherein the filesystem includes a 
plurality of access mechanisms and wherein each access 
mechanism of the plurality of access mechanisms is 
associated with a filesystem type; and 

a file storage, wherein the file storage has stored 
therein at least one filesystem object and wherein a 
given filesystem object within the at least one 
filesystem object has associated therewith two or more 
access control lists; 

wherein the filesystem, responsive to receiving from 
a requestor a request for an access control list 
associated with the given filesystem object, determines a 
filesystem type of the requestor and returns an access 
control list matching the filesystem type of the 
requestor . 

12. The apparatus of claim 11, wherein the filesystem 
determines whether an access control list matching the 
filesystem type of the requestor exists and, responsive 
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to a determination that a matching access control list 
exists, returns the matching access control list. 

13. The apparatus of claim 12, wherein the filesystem 
accesses the matching access control list using an access 
mechanism within the plurality of access mechanisms 
associated with the filesystem type of the requestor. 

14. The apparatus of claim 12, wherein the filesystem, 
responsive to a determination that a matching access 
control list does not exist, provides a new access 
control list for the filesystem type of the requestor and 
returns the new access control list. 

15. The apparatus of claim 14, wherein the filesystem 
accesses the new access control list using an access 
mechanism associated with the filesystem type of the 
requestor. 

16. The apparatus of claim 14, wherein the filesystem 
translating an existing access control list to the 
filesystem type of the requestor to form the new access 
control list. 

17. The apparatus of claim 14, wherein the filesystem 
provides a default access control list for the filesystem 
type of the requestor based on rules associated with the 
filesystem. 
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18. The apparatus of claim 11, wherein the filesystem 
stores the two or more access control lists in the file 
storage with the given filesystem object. 

19. The apparatus of claim 11, wherein the filesystem 
stores a native access control list in the file storage 
with the given filesystem object, the apparatus further 
comprising: 

an access control list storage, wherein the 
filesystem stores one or more non-native access control 
lists in access control list storage separate from the 
file storage. 

20. A computer program product, in a computer readable 
medium, for managing access control lists in a 
filesystem, the computer program product comprising: 

instructions for associating two or more access 
control lists with a given filesystem object; 

instructions, responsive to receiving from a 
requestor a request for an access control list associated 
with the given filesystem object, for determining a 
filesystem type of the requestor; and 

instructions for returning an access control list 
matching the filesystem type of the requestor. 



